Website Security suspicious API requests

1. Review and secure website permissions to ensure no SendGrid API keys are exposed.
2. Manage IP access in your Account Settings and add authorized IP addresses.
3. Secure your website and applications, ensuring all software is up to date.
4. Verify that your applications or Twilio SendGrid integrations are properly secured and running the latest software versions; this includes WordPress and cPanel.
5. Rotate all API keys and change passwords for your account and associated users.
6. Note:  a Laravel app in debug mode, it may inadvertently expose your API keys.
7. Enable two-factor authentication (2FA) for added security.
We’ll also need you to submit a Root Cause Analysis (RCA) with the following: 
· Incident Description: What happened? What exact dates did the fraudulent activity start and end? When did you discover it?
· Root Cause: How did it happen?
· Resolution: What measures have you taken to fix the problem?
Corrective / Preventive Actions: What measures have you taken to stop the activity and 
 ... Show more